PRIVACY POLICY AND COOKIES

This Privacy Policy sets out the principles of processing personal data obtained through the website by the Administrator: ​LLC "MISTODENT" Aleja Gen. Antoniego Chruściela "Montera" 88A, 04-412 Warsaw, entered into the National Court Register maintained by the District Court for the capital city of Warsaw. Warsaw, 13th Commercial Division, KRS number 0000991988, REGON number 523113133, NIP number 5213984106.
The Privacy Policy covers the following websites: https://mistodent.pl/#rec607296952
In order to implement the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation "GDPR"), we hereby inform you about the principles of processing your personal data collected when using the Controller's websites.
We make every effort to ensure all possible physical, technical and organisational measures to protect personal data against accidental or deliberate destruction, accidental loss, alteration, unauthorised disclosure, use or access, in accordance with all applicable laws.

I. ​​Definitions:

• ⇒
  Administrator – ​LLC "MISTODENT" Aleja Gen. Antoniego Chruściela "Montera" 88A, 04 412 Warsaw, entered into the National Court Register, maintained by the District Court for the capital city of Warsaw, 13th Commercial Division, under the KRS number 0000991988, REGON number 523113133, NIP number 5213984106
• ⇒
  Cookies – means IT data, in particular small text files, saved and stored on devices through which the User uses the Website pages.
• ⇒
  Administrator Cookies – means Cookies placed by the Administrator, related to the provision of electronic services by the Administrator via the Website.
• ⇒
  External Cookies – means Cookies placed by the Administrator's partners via the Website.
• ⇒
  Device – means an electronic device through which the User accesses the Website.
• ⇒
  User – means an entity to which, in accordance with the Terms and Conditions and legal provisions, services may be provided electronically or with which an Agreement for the provision of electronic services may be concluded.
• ⇒
  Website – means a website or application under which the Administrator operates a website operating under the domain https://mistodent.pl/#rec607296952
• ⇒
  Device – means an electronic device through which the User accesses the Website.
• ⇒
  User – means an entity to which, in accordance with the Policy and legal provisions, services may be provided electronically or with which an Agreement for the provision of electronic services may be concluded.

II. ​​Personal data collected on the website

1. The Controller has appointed a Data Protection Officer – Michał Zajdowicz, who can be contacted via the following email address: iod@mistodent.com.ua or via postal addresses: ​LLC "MISTODENT", Aleja Gen. Antoniego Chruściela "Montera" 88A, 04-412 Warsaw, with the note "Data Protection Officer."

2. When using the website, we may process users' personal data, such as:

a. First name and last name,
b. Telephone number,
c. Email address,
d. Correspondence address.

3. Personal data are processed by the Controller's employees and associates based on granted authorizations. Each person authorized to process personal data has been familiarized with the personal data protection principles and has agreed to maintain the confidentiality of the information provided.

4. Personal data may be entrusted to a third party that supports the Controller in achieving the processing purposes, including: Marketing services, email services, hosting, IT, administrative services, legal services, and consulting services.

5. The Administrator uses the services of only professional entities who guarantee the highest quality of service and ensure the security of the information entrusted to them.

6. The website may redirect you to another website managed by another Administrator. The Administrator is not responsible for the processing of personal data on other websites. Users should review the Privacy Policy upon each new visit.

III. ​​The purpose of personal data processing

1. Personal data are processed for the following purposes:

a. concluding and performing a contract – for the duration of the contract and after its termination, until the contract is properly performed;
b. creating reports, statistics, and analyses for the Controller's internal purposes;
c. sending marketing content – ​​until an objection is raised;
d. responding to messages from website users;
e. registering a visit.

2. The legal basis for the processing of personal data by the Controller is:

a. Article 6(1)(a) of the GDPR, i.e., consent obtained to the processing of personal data;
b. Article 6(1)(b) of the GDPR, i.e., performance of a contract or taking action on requests prior to concluding a contract;
c. Article 6(1)(c) of the GDPR, i.e., compliance with a legal obligation to which the Controller is subject;
d. Article 6(1)(f) of the GDPR, i.e., the Controller's legitimate interest.

IV. ​​​​Principles and duration of personal data processing

1. ​The User's personal data will be processed until consent is withdrawn or in connection with the Controller's business activities, for a period specified by law or for the purpose of processing.

2. The User has the right to access their data and to rectify, erase, restrict processing, the right to data portability, the right to object to processing, and the right to withdraw consent if processing is based on consent.

3. The User has the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office – if they believe that the processing of their personal data violates the provisions of the General Data Protection Regulation of 27 April 2016.

4. Personal data will not be processed in an automated manner, including in the form of profiling.

V. ​​Transfer of personal data outside the EU

1. The Controller may use tools from entities based outside the European Economic Area (EEA) or that may store data outside the EEA. Personal data will not be transferred to international organizations. The Controller will implement all legally available protection measures to secure the transfer of such data. Data may be transferred outside the EEA based on the exceptions provided for in Article 49 of the GDPR, provided that the conditions specified in that Article apply. Information on the security measures used and the scope of data transferred outside the EEA can be obtained by contacting the Controller or the DPO.

VI. ​ Profiling

2. Users’ personal data will not be processed in an automated manner, including in the form of profiling, i.e. no decisions that produce legal effects for a person or significantly affect them in a similar way will be based solely on the automatic processing of personal data and do not involve such an automated decision.

VII. ​ Activities on social networking sites

1. The Administrator is the owner of the following social media accounts:

a. Facebook
b. LinkedIn
c. YouTube
d. Instagram
e. Tik Tok
f. Threads
g. Telegram
h. Website

2. The Administrator maintains and manages social media accounts to promote products, services, and its activities. As part of these activities, it manages the personal data of social media users who follow the Administrator's profiles, including participating in contests and events, and engaging in dialogue with both the Administrator and other users through accounts managed by the Administrator.

3. ​If a user wishes to terminate the processing of personal data provided via social media, they should stop following the Administrator's profiles using the options provided by the portal, e.g., by clicking the "Like" button on Facebook.

4. All trademark rights (including logos), copyrights, database rights, and all other intellectual property rights to the content of the website and social media profiles belong to the Administrator.

5. Copying, modifying, using in any form, or reproducing, in whole or in part, the content of the website for commercial purposes is prohibited without the prior written consent of the Administrator and the author of the test.

6. The content presented on the website and social media profiles is intended to promote the Administrator's activities. Using the materials for any other purpose is prohibited.

7. The materials shared on the Administrator's social media profiles are the Administrator's property or have been made available with the consent of the authors of such content.

8. Users who use profiles on the Administrator's social media accounts declare that the Content they post:

a. will not be inappropriate. Content is considered inappropriate if:

a.i. it constitutes plagiarism, is defamatory, offensive, harassing, inaccurate, misleading, derogatory, discriminatory, threatening, harassing, or expresses racial or sexual prejudice;
a.ii. it contains elements that are mocking, rude, offensive, insulting, indecent suggestions, or profanity;
a.iii. it contains quotes from other users taken out of context to create a false or negative impression;
a.iv. it is obscene, obscene, or pornographic in nature; or
a.v. it constitutes a violation of another person's right to confidentiality or privacy;

b. it will not prejudice any ongoing legal proceedings of which the user is aware;

c. will not contain accusations of indecency or personal criticism directed against the Administrator's employees;

d. will not, with a high probability, (i) cause fear, uncertainty, or anxiety in another person; (ii) incite a violation of the rules of social coexistence; or (iii) incite aggression or hatred based on race or religion;

e. will not infringe any copyrights, trademarks, patents, or other intellectual property rights of the Administrator or any third party;

f. will not be technically harmful (including, without limitation, computer viruses, logic bombs, Trojan horses, computer worms, harmful components, corrupted data or other malicious software, harmful data, or activities);

g. will not constitute an offer, advertisement, or promotion of any product or service, nor will they contain requests for donations or financial support;

h. will not constitute spam or intrusive email advertising;

i. not be intended to impersonate another person or otherwise misrepresent the user's identity, affiliation, or position;

j. not represent or encourage conduct that could be considered a criminal offense, give rise to civil liability, or is contrary to law.

9. The User may post links to other websites and subpages on the Administrator's profile if:

a. the content or links to such websites or subpages do not violate any provisions of the Privacy Policy;

b. the terms and conditions of use of such websites or subpages permit the posting of links to them;

c. hey are clearly and conspicuously marked as links; 

d. the content of the websites or subpages is clearly related to the Content to which the link is placed; and

e. the link does not automatically download any files.

10. The Administrator reserves the right to prohibit any content that is inconsistent with the above rules, in particular comments that are:

a. defamatory, false, or misleading;

b. offensive, insulting, or threatening;

c. obscene or of a sexual nature;

d. harassing, racist, sexist, homophobic, or discriminatory against any religion or other group of people.

They will be deleted immediately.

11. Without the express consent of the Administrator, the User is not authorized to re-post any Content or other materials or applications that have been previously removed.

VIII. ​ Types of Cookies used

The Cookies used by the Administrator are safe for the User's Device. In particular, it is impossible for viruses or other unwanted software or malware to enter User Devices this way. These files allow us to identify the software used by the User and customize the Service for each User. Cookies typically contain the name of the domain they originate from, the duration of their storage on the Device, and an assigned value.
The Administrator uses two types of cookies:

• ●
  Session cookies: These are stored on the User's Device and remain there until the browser session ends. The stored information is then permanently deleted from the Device's memory. The session cookie mechanism does not allow the collection of any personal data or any confidential information from the User's Device.
• ●
  Persistent cookies: These are stored on the User's Device and remain there until they are deleted. Ending a browser session or turning off the Device does not delete them from the User's Device. The persistent cookie mechanism does not allow the collection of any personal data or any confidential information from the User's Device.

The following types of cookies are used within the Website:

• ●
  "essential" cookies, enabling the use of services available on the Website, e.g., authentication cookies used for services requiring authentication on the Website;
• ●
  cookies used to ensure security, e.g., used to detect authentication abuse on the Website;
• ●
  "performance" cookies, enabling the collection of information about how the Website's web pages are used;
• ●
  "functional" cookies, enabling the "remembering" of settings selected by the User and personalizing the User interface, e.g., in terms of the selected language or region of the User's origin, font size, website appearance, etc.;

In many cases, web browsing software (web browser) allows cookies to be stored on the User's end device by default. Website users can change their cookie settings at any time. These settings can be changed, in particular, to block the automatic handling of cookies in the web browser settings or to notify the User each time they are placed on the Website User's device. Detailed information about the possibilities and methods of handling cookies is available in the software (web browser) settings.

I. ​ The purposes for which Cookies are used

The Administrator uses Own Cookies for the following purposes:

• ●
  Configuring the website, adapting the content of the Website's web pages to the User's preferences and optimizing the use of the Website's web pages;
• ●
  Recognizing the Website User's device and its location and displaying the website accordingly, tailored to their individual needs;
• ●
  Remembering the settings selected by the User and personalizing the User interface, e.g., regarding the selected language or region of the User's origin;
• ●
  Remembering the history of pages visited on the Website in order to recommend content, font size, website appearance, etc.
• ●
  Correctly configuring selected Website functions, in particular enabling verification of the authenticity of the browser session.
• ●
  Optimizing and increasing the efficiency of the services provided by the Administrator.
• ●
  Implementing processes necessary for the full functionality of the websites, adapting the content of the Website's web pages to the User's preferences and optimizing the use of the Website's web pages. In particular, these cookies allow for the recognition of the basic parameters of the User's Device and the proper display of the website, tailored to their individual needs;
• ●
  Correct operation of the affiliate program, in particular enabling verification of the sources of User redirects to the Website's pages.
• ●
  Remembering the user's location and correctly configuring selected Website features, in particular enabling the customization of the information provided to the User, taking into account their location.
• ●
  Analyses, research, and audience audits, creating anonymous statistics that help understand how Website Users use the Website's pages, which allows for the improvement of their structure and content;
• ●
  Ensuring the security and reliability of the Website.

II. ​ Options for specifying the conditions for storing or accessing Cookies:

The User may independently and at any time change the cookie settings, specifying the conditions for storing and accessing Cookies on the User's Device. The User may change the settings referred to in the preceding sentence using the web browser settings or by configuring the service. These settings can be changed, in particular, to block the automatic handling of cookies in the web browser settings or to notify the User each time Cookies are placed on the User's device. Detailed information about the possibilities and methods of handling cookies is available in the software (web browser) settings.
Cookies stored on the Service User's end device may also be used by partners cooperating with the operator.
The User may delete Cookies at any time using the available functions in the web browser they use.
Restricting the use of Cookies may affect some of the functionalities available on the Service's website.

See how to disable cookies:

In the Chrome browser In the Firefox browser In the Opera browser In the Internet Explorer browser In the Safari browser

XI. ​Final Provisions

1. The Administrator reserves the right to update the Privacy Policy.

2. The Administrator reserves the right to withdraw or change the content presented on the Website without notice. The Administrator is not liable if, for any reason beyond the Administrator's control, the Website is unavailable at any time or for any period.

3. The Administrator reserves the right to occasionally restrict access to certain parts of the Website in connection with maintenance or updating work.

4. The Privacy Policy comes into effect on the date of its approval on September 25, 2023.

5. In matters not regulated by the Privacy Policy but relating to its subject matter, and in the event of any inconsistency of any part of the Privacy Policy with applicable law, the relevant provisions of Polish law shall apply in lieu of the challenged provision of the Policy, in particular:

a. Act of 23 April 1964 - Civil Code,

b. Act of 2 March 2000 on the protection of certain consumer rights and on liability for damage caused by a dangerous product,

c. Act of 27 July 2002 on specific terms and conditions of consumer sales and on amendments to the Civil Code,

d. Act of 18 July 2002 on the provision of services by electronic means (hereinafter referred to as the Act on the Protection of Personal Data),

e. Act of 10 May 2018 on the protection of personal data,

f. GDPR.